Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10b8771f-fb93-42ae-abdd-1dbf887ef1d1/a15ad9066c5a74bca34d2962ca4073cbda861666.roa
File:                     a15ad9066c5a74bca34d2962ca4073cbda861666.roa (raw, json)
Hash identifier:          0NeHcmca9PCfXHjt3quEMPEYH2vrEfua6kWz4MG7gvQ=
Subject key identifier:   49:99:02:9C:92:1C:8D:EF:25:89:E3:93:F6:1C:50:80:67:7A:B5:7F
Certificate issuer:       /CN=17e7a97de06776a354f146456ee6fb554ad676f2
Certificate serial:       BE56
Authority key identifier: CE:4F:9B:77:40:91:9B:9C:96:66:E0:DE:F5:51:F0:D2:62:6A:31:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e7a97de06776a354f146456ee6fb554ad676f2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10b8771f-fb93-42ae-abdd-1dbf887ef1d1/a15ad9066c5a74bca34d2962ca4073cbda861666.roa
Signing time:             Tue 10 May 2022 15:24:54 +0000
ROA not before:           Tue 12 Apr 2022 03:00:00 +0000
ROA not after:            Fri 12 Apr 2024 03:00:00 +0000
asID:                     272042
IP address blocks:        179.63.32.0/22 maxlen: 22
                          2803:ad10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48726 (0xbe56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e7a97de06776a354f146456ee6fb554ad676f2
        Validity
            Not Before: Apr 12 03:00:00 2022 GMT
            Not After : Apr 12 03:00:00 2024 GMT
        Subject: CN=a15ad9066c5a74bca34d2962ca4073cbda861666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:eb:45:7a:df:ca:8f:6d:0a:55:2b:9c:72:13:
                    91:ca:83:c9:97:2a:e4:ae:fe:48:3e:d7:7c:8e:3f:
                    73:3c:fe:06:36:0f:14:3e:cf:de:01:06:b3:70:cf:
                    33:26:6a:3b:5a:d4:e7:f3:26:c7:24:f8:65:0a:6e:
                    df:48:3b:67:1e:89:30:2f:42:f8:f2:2b:39:26:b2:
                    c4:ac:09:9d:43:16:09:81:27:1d:3d:5b:96:4c:38:
                    ba:50:14:15:52:55:c0:00:df:96:e1:0e:c7:22:dc:
                    55:2b:3b:90:2b:e4:31:f8:f2:f8:68:40:bc:be:50:
                    b8:48:7f:04:68:a4:5e:c5:8a:f5:79:8c:bf:2d:97:
                    92:f0:13:83:fd:44:5a:b1:7f:a5:17:1f:6d:5c:ea:
                    1d:cb:a0:aa:bb:3b:6b:0f:f2:08:cb:91:a4:8b:f6:
                    35:1f:2e:86:47:52:f3:2d:3e:49:eb:4d:de:e3:a3:
                    13:75:3c:fe:9a:1a:98:28:3c:16:22:5f:26:04:dc:
                    a0:7f:dd:4e:6a:95:1a:be:a9:5c:9d:cf:a6:eb:8a:
                    7e:5a:4f:bd:d2:4f:92:60:45:b2:1a:6d:ec:a1:77:
                    8a:b6:19:1c:67:a0:16:4f:30:19:1b:7d:0c:1a:6e:
                    2d:5a:9a:21:b2:a7:10:46:77:8a:77:f7:c2:dc:ff:
                    90:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:99:02:9C:92:1C:8D:EF:25:89:E3:93:F6:1C:50:80:67:7A:B5:7F
            X509v3 Authority Key Identifier:
                keyid:CE:4F:9B:77:40:91:9B:9C:96:66:E0:DE:F5:51:F0:D2:62:6A:31:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e7a97de06776a354f146456ee6fb554ad676f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10b8771f-fb93-42ae-abdd-1dbf887ef1d1/a15ad9066c5a74bca34d2962ca4073cbda861666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10b8771f-fb93-42ae-abdd-1dbf887ef1d1/17e7a97de06776a354f146456ee6fb554ad676f2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.32.0/22
                IPv6:
                  2803:ad10::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:c8:f5:47:e6:08:80:21:42:28:2f:d4:1c:b7:e6:d9:4d:69:
         2b:dc:0f:2e:eb:5f:22:6c:c5:30:db:a4:ec:1b:63:5e:e3:6b:
         b7:3c:4b:db:f9:dc:16:31:50:1c:fb:b5:11:cb:ec:6b:62:92:
         9b:49:90:cb:7d:9a:09:ec:64:51:fe:53:19:f5:c6:4d:95:1e:
         5f:9a:ab:c9:2d:2f:75:99:65:f2:57:5a:54:d0:ce:99:5b:64:
         49:82:15:73:29:09:e9:02:30:fc:3f:0c:e6:14:ec:5e:ea:8f:
         a9:3d:af:9d:bc:92:d7:72:42:8e:78:64:cf:03:a2:9c:ae:37:
         eb:7f:fc:16:a5:e3:41:8c:60:df:fb:35:d7:34:0e:bb:dc:80:
         43:31:8f:b7:89:4e:c4:43:9f:4d:67:eb:a1:34:42:e1:5d:1f:
         f5:5a:69:5e:71:5a:4b:59:40:38:e7:2c:13:eb:bc:54:a7:d5:
         bf:c8:a4:9f:89:8e:2f:9e:ee:55:44:e3:c4:50:5d:54:7b:bb:
         7c:08:0d:bf:24:4c:b1:32:73:82:d4:d7:9a:c5:ed:11:73:ee:
         47:25:85:57:89:d7:c3:df:72:e5:f7:ea:25:a6:74:93:19:80:
         8f:f9:13:fd:0c:2d:b6:b5:4d:9d:96:c5:3b:7d:a1:c0:14:f8:
         e2:84:ba:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----